Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/4422D98047A011F1B21CB3EACE1D38B0.roa
File:                     4422D98047A011F1B21CB3EACE1D38B0.roa (raw, json)
Hash identifier:          VzFmfGTvJIqj9Oyih5wAzdES10YfFZ8XhPgleb5SxQA=
Subject key identifier:   78:35:31:17:3C:33:73:D1:89:EC:78:C5:A3:F3:1B:7E:96:BB:C9:26
Certificate issuer:       /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial:       1134
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/4422D98047A011F1B21CB3EACE1D38B0.roa
Signing time:             Mon 04 May 2026 10:01:49 +0000
ROA not before:           Mon 04 May 2026 10:01:44 +0000
ROA not after:            Wed 05 May 2027 10:01:44 +0000
asID:                     55154
IP address blocks:        196.251.70.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
                          rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 14 May 2026 10:40:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4404 (0x1134)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
        Validity
            Not Before: May  4 10:01:44 2026 GMT
            Not After : May  5 10:01:44 2027 GMT
        Subject: CN=69f86e8d-9d41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:23:1a:89:94:60:68:86:cb:0a:d8:be:b0:f9:
                    c8:f1:38:c9:78:1e:3f:ac:3e:71:07:26:b8:00:d5:
                    4e:c0:b7:ea:71:7b:05:8b:e2:b6:12:7b:32:29:d4:
                    ea:64:db:a3:a4:dc:ed:60:b6:19:dd:0b:9e:5d:d2:
                    77:e2:29:e9:74:55:d3:cf:c6:27:78:78:ad:c3:20:
                    87:8c:55:7e:42:40:81:b8:6b:2d:9a:9a:ad:fa:06:
                    ba:36:e1:27:3c:4c:00:d8:eb:1e:5f:71:a8:b2:c3:
                    b2:89:f6:24:27:e8:4a:57:24:c8:f0:c3:cc:1b:6a:
                    f6:7b:24:f0:c2:b7:0e:3e:cd:51:11:55:a4:d1:e0:
                    98:86:c5:68:72:8e:a3:f0:60:c1:b5:35:87:1e:e3:
                    0a:f7:aa:1b:e2:e3:67:2d:c0:2d:76:c3:07:c7:e6:
                    4d:80:b0:aa:79:70:3d:c7:70:6b:89:ef:a8:b3:2c:
                    5a:d6:68:e0:05:b0:df:f9:0e:e5:27:7e:02:b5:da:
                    45:1f:00:a1:57:3d:f5:bf:25:35:7a:a0:1d:ea:04:
                    6d:50:f5:95:25:5f:a0:eb:93:00:3f:13:01:09:0e:
                    27:81:43:d9:a6:1d:cc:4e:7f:36:d9:89:8d:c2:99:
                    53:d1:dc:f7:f5:6f:10:d5:e9:f9:09:ea:25:d8:5b:
                    ca:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:35:31:17:3C:33:73:D1:89:EC:78:C5:A3:F3:1B:7E:96:BB:C9:26
            X509v3 Authority Key Identifier:
                keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/4422D98047A011F1B21CB3EACE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.251.70.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:d8:c8:c8:d8:0b:e7:e9:df:55:3a:da:a9:34:4c:8e:01:cf:
         fe:23:bc:34:ab:01:e7:ea:db:60:39:c3:94:43:a6:59:c7:e5:
         70:86:e4:86:a0:fa:f9:e1:9b:e4:50:ef:61:e7:3a:1c:98:c6:
         13:51:1d:fc:41:4e:4d:b2:b3:02:c5:06:51:dd:51:20:0f:ff:
         19:43:68:f3:fe:21:62:38:34:3c:9a:60:fb:bb:95:ca:de:88:
         96:87:01:de:ba:b1:0a:30:bb:cd:78:85:67:e7:68:a6:3b:78:
         d3:25:30:62:85:96:80:d4:13:23:64:12:8c:e8:7c:18:4c:d6:
         20:c4:27:21:83:84:64:47:01:aa:1d:d9:3b:8d:55:83:d8:4a:
         a5:40:4f:04:52:62:0c:94:2e:58:59:e9:6c:0c:c9:81:9c:74:
         40:62:d7:ef:1e:4b:65:a2:7d:b3:4a:13:93:a4:a7:37:3b:ad:
         d8:8f:ee:80:17:99:19:4d:c4:7d:7b:43:fe:3b:a0:b5:82:ec:
         60:1b:3b:0f:ab:cb:47:db:bd:6d:25:c2:11:b9:32:b9:03:79:
         fd:f6:a9:35:20:fa:43:90:88:12:e8:16:2b:f0:42:c8:ec:bc:
         d9:ec:8d:fd:1d:0b:ce:bb:98:41:cd:d8:43:59:94:b3:81:c3:
         bc:1d:5c:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:48:25 2026 by rpki-client